For the non-technical reader, the bit after "?sqlString=" in the url is the actual query used to pull data from the database and since it's right there in the url the query terms can be changed. This was used to pull every individual record including social security numbers from the system.

Line after line of arbitrary-looking crap: it reminds me of the old IBM JCL whose whole purpose seemed to be to obstruct the intelligent use of computers. People used to pass groups of punched cards to each other, saying "No-one knows why, but this lot works".

Minor word of warning for anyone in the UK who thinks about fiddling with the SQL string to access extra data, you could face up to six months in jail under the Computer Misuse Act 1990; I really wish I was joking.